Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2017-10309

7 documents7 sources
Severity
7.1HIGH
EPSS
1.8%
top 17.19%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
14
Netapp E-series Santricity OS ControllerNetapp Oncommand Unified ManagerOracle Corporation Java+11 more
Timeline
PublishedOct 19
Latest updateMay 13

Description

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability …

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.7

Affected Packages13 packages

▶CVEListV5oracle_corporation/java9, Java SE: 8u144+1
▶NVDoracle/jdk1.8.0, 1.9.0+1
▶NVDoracle/jre1.8.0, 1.9.0+1

Also affects: Enterprise Linux 7.5

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-5269-8f5r-q5c5: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment)↗2022-05-13
▶
CVEList
CVE-2017-10309: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment)↗2017-10-19
▶

💥Exploits & PoCs

1
Exploit-DB
Oracle Java SE - Web Start jnlp XML External Entity Processing Information Disclosure↗2017-10-30
▶

📋Vendor Advisories

2
Red Hat
JDK: unspecified vulnerability fixed in 8u151 and 9.0.1 (Deployment)↗2017-10-17
▶
Debian
CVE-2017-10309: openjdk-8 - Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployme...↗2017
▶

💬Community

1
Bugzilla
CVE-2017-10309 Oracle JDK: unspecified vulnerability fixed in 8u151 and 9.0.1 (Deployment)↗2017-10-17
▶
CVE-2017-10309 (HIGH CVSS 7.1) | Vulnerability in the Java SE compon | cvebase.io